This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft File: FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json) Hash identifier: 9bmG7RD08HQ4mE600lK2AfZowVnaFMyThmFjTev147U= Subject key identifier: 86:8B:25:80:9E:24:85:6B:C1:BF:D8:BD:9B:AC:0B:5E:8C:2B:42:2D Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6 Certificate issuer: /CN=15954473605fa34d291fb743da415e55d69220d6 Certificate serial: 019C4322A2EC427E566DFC7C3F92B71D0CDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft Manifest number: 09F0 Signing time: Mon 09 Feb 2026 16:01:09 +0000 Manifest this update: Mon 09 Feb 2026 16:01:09 +0000 Manifest next update: Tue 10 Feb 2026 16:01:09 +0000 Files and hashes: 1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: +lyR2WwxZgjIhkAtfZVkQtQJrXvnS+vIxQtpXVK4QMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:a2:ec:42:7e:56:6d:fc:7c:3f:92:b7:1d:0c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15954473605fa34d291fb743da415e55d69220d6 Validity Not Before: Feb 9 16:01:09 2026 GMT Not After : Feb 10 16:01:09 2026 GMT Subject: CN=868b25809e24856bc1bfd8bd9bac0b5e8c2b422d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:07:47:27:83:e2:36:9c:1b:e7:d3:2e:70:ad: 85:e0:49:06:47:ce:d5:4b:a5:1a:0c:98:8e:fd:77: d3:df:d0:8c:2e:08:92:a5:4b:9f:b6:57:39:aa:25: 82:21:0e:6b:16:7a:85:7f:8d:96:ac:aa:1e:7c:e3: e4:aa:0f:b2:e0:7a:3c:f9:19:1b:c8:66:09:48:17: c3:4f:a4:87:a7:e5:2e:31:e2:7b:16:da:23:04:65: cb:68:3f:b2:e7:a3:33:56:3d:31:c4:98:60:72:1f: de:d9:ef:42:2c:56:3a:6e:bc:ad:67:2a:af:46:fb: 09:2c:4e:04:a3:4c:79:00:f1:b1:d4:2a:47:5e:68: c3:5b:01:b3:62:a5:52:be:0b:24:de:22:83:da:97: 17:3e:41:59:68:8b:f0:65:46:be:4a:b0:5e:01:2a: 74:a9:3c:6d:b7:b0:b9:18:da:2a:1a:f6:51:58:37: 8b:2e:1f:08:bc:af:01:e3:9f:a6:91:17:9d:db:4e: b7:85:ee:02:97:e8:82:2a:f8:d7:2d:de:06:ef:0e: 0d:1e:fc:e6:f8:8a:25:35:13:74:ac:1e:e6:1e:56: 29:a9:c2:2e:f5:a3:6d:c9:6e:71:d7:23:c8:de:b1: a4:63:11:29:8e:ab:3f:e4:cd:72:35:3b:80:f8:43: fb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8B:25:80:9E:24:85:6B:C1:BF:D8:BD:9B:AC:0B:5E:8C:2B:42:2D X509v3 Authority Key Identifier: keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:69:22:6a:f6:2e:85:ec:6c:34:a4:b0:33:0a:e9:08:e0:c3: e1:d0:d1:a2:84:09:08:9a:fe:3c:78:3a:5f:15:47:2a:8b:0b: fb:1e:a3:00:ec:c8:d1:33:b6:51:38:1c:6c:8c:c0:d5:50:4f: c1:77:4e:62:91:96:62:24:ae:de:6b:81:b8:97:af:77:7f:03: 62:0d:d9:fb:86:12:ae:82:c3:b0:f9:72:8b:56:87:c8:b8:a8: 28:d8:32:c0:39:8b:2b:3d:88:cc:c1:43:e0:4d:82:6e:34:75: e4:2f:53:73:f2:68:c1:b2:2e:94:11:38:dd:1f:12:88:8c:71: c2:90:41:ef:da:9b:71:18:7d:52:f2:77:55:b6:c9:4f:ac:f1: d4:0a:c6:77:28:c9:ec:61:59:a9:ea:9a:f2:6b:38:fd:fb:64: 1c:15:1e:38:71:3e:86:6b:b8:a3:dd:38:43:3c:99:62:14:a1: 72:ab:98:d4:c2:bf:62:5b:88:18:40:93:fa:85:8e:d2:95:10: a2:f2:8d:d0:3c:57:0b:82:c0:a3:b9:45:6e:ec:c0:e6:56:fe: ba:49:5f:bd:11:10:6f:bb:ce:86:f6:52:25:26:92:d1:40:b8: 35:99:c1:fc:b8:10:79:c3:4a:1a:21:41:37:82:27:be:95:a6: fe:e3:f5:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqLsQn5Wbfx8P5K3HQzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTU0NDczNjA1ZmEzNGQyOTFmYjc0M2RhNDE1ZTU1ZDY5 MjIwZDYwHhcNMjYwMjA5MTYwMTA5WhcNMjYwMjEwMTYwMTA5WjAzMTEwLwYDVQQD Eyg4NjhiMjU4MDllMjQ4NTZiYzFiZmQ4YmQ5YmFjMGI1ZThjMmI0MjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggdHJ4PiNpwb59MucK2F4EkGR87V S6UaDJiO/XfT39CMLgiSpUuftlc5qiWCIQ5rFnqFf42WrKoefOPkqg+y4Ho8+Rkb yGYJSBfDT6SHp+UuMeJ7FtojBGXLaD+y56MzVj0xxJhgch/e2e9CLFY6brytZyqv RvsJLE4Eo0x5APGx1CpHXmjDWwGzYqVSvgsk3iKD2pcXPkFZaIvwZUa+SrBeASp0 qTxtt7C5GNoqGvZRWDeLLh8IvK8B45+mkRed2063he4Cl+iCKvjXLd4G7w4NHvzm +IolNRN0rB7mHlYpqcIu9aNtyW5x1yPI3rGkYxEpjqs/5M1yNTuA+EP7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaLJYCeJIVrwb/YvZusC16MK0ItMB8GA1UdIwQY MBaAFBWVRHNgX6NNKR+3Q9pBXlXWkiDWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84ZTM0MDYtNjMzYy00ZjI5LTk4ZjQt YWQ2ZjZhNjkzYWM2LzEvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84ZTM0MDYtNjMzYy00ZjI5LTk4ZjQtYWQ2ZjZhNjkzYWM2 LzEvRlpWRWMyQmZvMDBwSDdkRDJrRmVWZGFTSU5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGkiavYu hexsNKSwMwrpCODD4dDRooQJCJr+PHg6XxVHKosL+x6jAOzI0TO2UTgcbIzA1VBP wXdOYpGWYiSu3muBuJevd38DYg3Z+4YSroLDsPlyi1aHyLioKNgywDmLKz2IzMFD 4E2CbjR15C9Tc/JowbIulBE43R8SiIxxwpBB79qbcRh9UvJ3VbbJT6zx1ArGdyjJ 7GFZqeqa8ms4/ftkHBUeOHE+hmu4o904QzyZYhShcquY1MK/YluIGECT+oWO0pUQ ovKN0DxXC4LAo7lFbuzA5lb+uklfvREQb7vOhvZSJSaS0UC4NZnB/LgQecNKGiFB N4InvpWm/uP1vg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:41 2026 by rpki-client